Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2350B352B1DA11E99B889647F8AEA228.roa
File: 2350B352B1DA11E99B889647F8AEA228.roa (raw, json)
Hash identifier: SAHLyuANUWqfmmH6zytE8ai/ANpcmuvhKYlC3borTjo=
Subject key identifier: 0D:4C:21:FE:58:A4:58:6B:0E:4E:24:41:B2:2A:56:D4:07:5E:25:D4
Certificate issuer: /CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Certificate serial: 58
Authority key identifier: 95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2350B352B1DA11E99B889647F8AEA228.roa
Signing time: Mon 29 Jul 2019 08:23:27 +0000
ROA not before: Mon 29 Jul 2019 08:23:21 +0000
ROA not after: Wed 27 Jul 2022 08:23:21 +0000
asID: 36916
IP address blocks: 41.180.64.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3669D6BAF/serialNumber=959733DF59E86EA7C23B2FB37A6E846DBB18827B
Validity
Not Before: Jul 29 08:23:21 2019 GMT
Not After : Jul 27 08:23:21 2022 GMT
Subject: CN=5d3eacff-3eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0c:6c:a1:e9:33:eb:ee:5e:48:c4:5c:79:a5:
cb:cb:b6:36:17:f5:1c:d7:40:f7:09:d0:ae:e1:19:
42:41:43:b1:00:aa:6b:fe:9b:41:7c:ad:42:8b:d9:
66:48:11:de:d5:38:68:aa:70:bc:85:7f:a3:35:73:
4e:d6:6b:c0:12:24:85:ec:63:89:cb:8d:72:d5:d0:
03:97:f4:93:b7:c0:e5:06:72:93:a1:87:3a:eb:b4:
52:f6:e9:7d:3f:4f:ea:f1:2d:98:1c:11:bf:57:a7:
5d:41:2f:27:93:5b:bf:7a:cb:82:1a:ac:5b:dc:44:
2e:e6:6a:c5:d1:f2:e3:59:5d:bd:18:f2:2b:80:94:
f8:f0:17:c6:48:f5:67:37:39:2b:41:10:9c:13:ab:
ca:a8:ff:ed:a4:c6:d8:fa:5f:dd:f7:ca:0a:f6:06:
43:a4:5b:60:1f:32:e7:fc:77:c6:72:b2:c4:4a:34:
79:ad:35:2a:0e:ff:61:ba:fc:89:7f:be:39:13:44:
fa:52:33:bb:09:bb:d7:49:7a:f9:ad:25:96:11:98:
f3:06:b5:45:67:1e:c0:9c:3c:30:ad:04:31:12:49:
80:df:28:5c:83:f8:af:b5:b1:16:b1:0f:79:e5:7e:
ad:60:24:c1:8e:ad:38:e1:f0:da:0a:7b:39:6b:65:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:21:FE:58:A4:58:6B:0E:4E:24:41:B2:2A:56:D4:07:5E:25:D4
X509v3 Authority Key Identifier:
keyid:95:97:33:DF:59:E8:6E:A7:C2:3B:2F:B3:7A:6E:84:6D:BB:18:82:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/lZcz31nobqfCOy-zem6EbbsYgns.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lZcz31nobqfCOy-zem6EbbsYgns.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/BEFB44EE879A11E99F393351F8AEA228/2350B352B1DA11E99B889647F8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
41.180.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:e2:58:f4:42:55:dd:01:a2:f4:48:a1:d9:0c:85:79:f3:e9:
22:3a:8e:65:4d:2b:2d:e8:d6:8e:fa:49:7d:7d:da:bb:79:f3:
46:19:5e:25:40:06:64:1f:4d:b7:8b:93:cd:ce:f3:e4:c1:58:
18:4d:4a:c8:79:98:5c:c3:f9:ee:c8:66:04:04:62:28:6c:b2:
ab:64:42:e4:eb:dc:90:92:b9:30:21:9e:d5:3f:be:fe:00:e7:
1b:54:11:a0:1d:35:23:fa:0e:af:b4:76:49:46:df:74:ad:02:
37:3f:ed:f5:80:12:25:53:8c:67:09:d4:f5:f8:2e:56:4c:4e:
a0:cb:a0:76:b9:af:1d:c9:be:45:80:d5:2f:bd:a6:c9:39:cb:
a6:ca:e5:83:c7:ed:67:c7:7a:c0:b2:8d:cf:9e:59:6e:2e:f4:
01:e1:79:ff:9d:56:25:65:cd:4b:3a:c1:b3:1f:ee:0e:e9:11:
b1:f1:58:01:74:ac:76:d8:c6:53:07:cd:19:7d:fd:4f:c5:b6:
00:c6:65:07:2d:ba:fb:d3:0c:c3:58:31:b5:8b:18:0f:2f:c2:
13:25:2a:22:f5:e6:de:68:53:28:7d:fa:3b:39:11:f6:5e:99:
58:a9:a8:a4:f5:e2:66:e5:c2:3c:53:34:09:ac:7e:06:17:fc:
7f:ff:fb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:32 2024 by rpki-client on console-ams.rpki-client.org